datadapp-manualsdex[.]xyz

This domain is flagged as a high-risk brand impersonation threat targeting Binance users. Analysis indicates the infrastructure was designed to deceive visitors into believing they are accessing legitimate decentralized platform services, likely to facilitate unauthorized transactions or credential harvesting. The specific threat type—brand impersonation—exploits trust in established cryptocurrency exchange branding to manipulate victims into disclosing sensitive information or approving malicious smart contracts. Infrastructure analysis reveals the domain datadapp-manualsdex.xyz was registered on July 22, 2025, through Web Commerce Communications Limited. It resolves to the IP address 104.21.91.42 and has been detected by 12 out of 95 security vendors on VirusTotal. The domain appears on four security blocklists, including Polkadot, Codeesura, PhishDestroy, and Enkrypt, and holds a Gridinsoft trust score of 0/100. The page title, 'Decentralized Platform,' further suggests an attempt to mimic legitimate Binance-associated services, increasing the likelihood of successful social engineering. Mitigation steps for this brand impersonation threat include immediate blocking of the domain and its associated IP address across all network security controls. Users should verify the authenticity of any Binance-related communication by cross-referencing official channels and avoiding interaction with unsolicited links or decentralized application prompts. Security teams are advised to monitor for similar domains registered through the same registrar or resolving to the identified IP, as these may indicate related malicious infrastructure. Employee and user training should emphasize the risks of brand impersonation in cryptocurrency contexts, particularly the dangers of approving transactions or entering credentials on unverified platforms.